CVE-2026-55563: Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event and preserves ok-...

Added to the CISA Known Exploited Vulnerabilities catalog on 21 Sep 2026. Vendor: AI/ML. Product: machine learning.

Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event and preserves ok-to-test, approved, or lgtm labels across newly pushed commits, allowing a fork contributor to obtain...

Required action: Review and patch if applicable to your AI infrastructure.